Claims
- 1. A method for dynamically generating at least one metric threshold indicating alarm conditions in a monitored system, the method comprising the steps of:
establishing at least one default alarm threshold associated with a metric; repeatedly receiving data associated with the metric; statistically analyzing the received data to establish at least one updated alarm threshold; and triggering an alarm on receipt of received data that violate the at least one updated alarm threshold.
- 2. The method of claim 1, wherein the metric relates to a computer network, and further comprising the step of using the alarm to assess performance in an e-commerce system.
- 3. The method of claim 1 further comprising the steps of (i) repeating the analysis step and (ii) adjusting the at least one updated alarm threshold based on previously established updated alarm limits.
- 4. The method of claim 1 wherein the step of statistically analyzing the received data further comprises the step of categorizing the received data as normal.
- 5. The method of claim 1 wherein the step of statistically analyzing the received data further comprises the step of categorizing the received data as normalizable.
- 6. The method of claim 1 wherein the step of statistically analyzing the received data further comprises the step of categorizing the received data as non-normal.
- 7. The method of claim 3 further comprising the steps of:
computing at least one value; filtering the at least one value; and equating the at least one updated alarm threshold to the at least one value.
- 8. The method of claim 4 wherein the step of categorizing the received data further comprises the step of applying a chi-square test to the received data.
- 9. The method of claim 4 wherein the step of categorizing the received data further comprises the step of applying an Anderson-Darling test to the received data.
- 10. The method of claim 5 wherein the step of categorizing the received data further comprises the steps of:
operating on the received data with a function representing the estimated cumulative distribution of the received data, producing a first result; and operating on the first result with a quantile function of a normal distribution.
- 11. The method of claim 7 wherein the at least one value is computed using statistical process control techniques.
- 12. The method of claim 7 wherein the at least one value is computed using at least one heuristic technique.
- 13. The method of claim 12 wherein the at least one heuristic technique comprises at least one of quantile function and weighted linear regression techniques.
- 14. The method of claim 7 wherein the step of filtering further comprises computing a weighted sum of the received data.
- 15. The method of claim 14 wherein the received data comprises historical data.
- 16. The method of claim 14 wherein the received data comprises a statistical summarization of raw metric data.
- 17. The method of claim 14 wherein the received data are associated with at least one predetermined time period.
- 18. The method of claim 1 wherein the step of triggering an alarm further comprises the step of comparing the received data with a fixed threshold.
- 19. The method of claim 1 wherein the step of triggering an alarm further comprises the step of comparing the mean and standard deviation of the received data with the at least one updated alarm threshold.
- 20. The method of claim 1 wherein the step of triggering an alarm further comprises the steps of:
normalizing the received data; and comparing the mean and standard deviation of the normalized received data with the at least one updated alarm threshold.
- 21. The method of claim 1 wherein the step of triggering an alarm further comprises the step of comparing the mean of the received data with the at least one updated alarm threshold.
- 22. An article of manufacture comprising a program storage medium having computer readable program code embodied therein for dynamically generating at least one metric threshold indicating alarm conditions in a monitored system, the computer readable program code in the article of manufacture including:
computer readable code for establishing at least one default alarm threshold associated with a metric; computer readable code for repeatedly receiving data associated with the metric; computer readable code for statistically analyzing the received data to establish at least one updated alarm threshold; and computer readable code for triggering an alarm on receipt of received data that violate the at least one updated alarm threshold so as to achieve the dynamic generation of at least one metric threshold.
- 23. A program storage medium readable by a computer, tangibly embodying a program of instructions executable by the computer to perform method steps for dynamically generating at least one metric threshold indication alarm conditions in a monitored system, the method steps comprising:
establishing at least one default alarm threshold associated with a metric; repeatedly receiving data associated with the metric; statistically analyzing the received data to establish at least one updated alarm threshold; and triggering an alarm on receipt of received data that violate the at least one updated alarm threshold so as to achieve the dynamic generation of at least one metric threshold.
- 24. A system for dynamically generating at least one metric threshold indicating alarm conditions in a monitored system, the system comprising:
means for establishing at least one default alarm threshold associated with a metric; means for repeatedly receiving data associated with the metric; means for statistically analyzing the received data to establish at least one updated alarm threshold; and means for triggering an alarm on receipt of received data that violate the at least one updated alarm threshold.
- 25. Apparatus for dynamically generating at least one metric threshold indicating alarm conditions in a monitored system, the apparatus comprising:
a limit store that establishes at least one default alarm threshold associated with a metric; a data manager that repeatedly receives data associated with the metric; a threshold computation module that statistically analyzes the received data to establish at least one updated alarm threshold; and an alarm manager that triggers an alarm on receipt of received data that violate the at least one updated alarm threshold.
- 26. The apparatus of claim 25 further comprising means for interfacing with at least one component of a computer network, the alarm conditions being indicative of network performance.
CROSS-REFERENCE TO RELATED CASES
[0001] This application claims priority to and the benefit of, and incorporates herein by reference, in their entirety, the following provisional U.S. patent applications:
[0002] Serial No. 60/307,055, filed Jul. 20, 2001, and
[0003] Serial No. 60/322,021, filed Sep. 13, 2001.
[0004] Further, this application incorporates herein by reference, in its entirety, U.S. provisional application serial No. 60/307,730, filed Jul. 3, 2001.
Provisional Applications (2)
|
Number |
Date |
Country |
|
60307055 |
Jul 2001 |
US |
|
60322021 |
Sep 2001 |
US |